SonicWall Endpoint Security

Single-agent NGAV and EDR product for SMBs and MSPs built on SonicWall's RTDMI engine, distinct from Capture Client. Supported platforms are Linux, macOS and Windows. It is recorded as supporting behavioral detection, central management console, cloud-assisted scanning and malware detection. Its record also notes ransomware protection and sandbox analysis. The stated market is Service Provider and small and medium business.

Current Version

—Not known

Product Page

sonicwall.com/…/sonicwall-endpoin…

Market

Service ProviderSMB

Licence

Paid

Price

Quote

Record Created

2026-09-19

Last Updated

2026-10-10

SonicWall has sold network security appliances since 1991 and has changed owner repeatedly: Dell bought it in 2012, then sold it in 2016 as part of the Dell Software group to Francisco Partners and Elliott Management, under whom it has been independent since. It is headquartered in Milpitas, California, and sells almost entirely through resellers and managed service providers. The firewall is the business. The SonicWall TZ series covers small offices and branches and the SonicWall NSa series the larger sites, with SonicWall NSsp at the top and SonicWall Network Security Manager as the console. Its subscription services — SonicWall Capture ATP for sandboxing suspicious files and the Capture Security services around it — are what the appliances are licensed with. SonicWall Capture Client is its endpoint product, and worth understanding before comparing its results with others here: the malware engine inside it is SentinelOne's, licensed rather than built, so a Capture Client result reflects SentinelOne's detection as delivered through SonicWall's management. Vendor page →

Website

sonicwall.com

Country

🇺🇸United States

Headquarters

🇺🇸Milpitas, United States

Year Established

1991

Customers

500K organisations

Users

3M devices protected

Revenue

$400.0M (2026)